CVE-2025-15406
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A flaw was found in PHPGurukul Online Course Registration up to 3.1 affecting an unknown function, causing missing authorization. Remote exploitation is possible, and the exploit has been published.
Risk Assessment
Missing authorization may allow unauthorized access to course registration functions, potentially leading to data breaches or unauthorized modifications.
Recommendation
Upgrade PHPGurukul Online Course Registration to the latest version immediately and review logs for unauthorized activities.
Other vulnerabilities in PHPGurukul Online Course Registration
See all- CVE-2026-5814High
A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1 in the file /admin/check_availability.php. Manipulation of the regno argument leads to SQL injection. The attack can be initiated remotely and the exploit is publicly available.
- CVE-2026-5813High
PHPGurukul Online Course Registration 3.1 has a SQL injection vulnerability in /check_availability.php via the cid argument. The attack can be launched remotely and the exploit is publicly available.
- CVE-2025-50485High
The vulnerability in the /crm/change-password.php script of PHPGurukul Online Course Registration v3.1 stems from improper session invalidation after password change. This allows an attacker to hijack the user's session and gain unauthorized access to the account.
Original NVD description (English source)
A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS